diff --git a/recipes/settings.py b/recipes/settings.py
index 120a1386a9..7f8e0daa96 100644
--- a/recipes/settings.py
+++ b/recipes/settings.py
@@ -52,6 +52,9 @@
 
 ALLOWED_HOSTS = os.getenv('ALLOWED_HOSTS').split(',') if os.getenv('ALLOWED_HOSTS') else ['*']
 
+if os.getenv('CSRF_TRUSTED_ORIGINS'):
+    CSRF_TRUSTED_ORIGINS = os.getenv('CSRF_TRUSTED_ORIGINS').split(',')
+
 CORS_ORIGIN_ALLOW_ALL = True
 
 LOGIN_REDIRECT_URL = "index"